Analyse phishing et sécurité de fundershtex.com

The domain fundershtex.com was observed as an offline site associated with brand impersonation targeting the Argent brand. Registration data indicate the domain was created on 25 November 2025 and is registered via Name SRS AB. The authoritative nameservers chad.ns.cloudflare.com and shubhi.ns.cloudflare.com resolve the domain to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The site presents the page title “Fundershtex” but does not provide an SSL/TLS certificate, leaving any HTTP traffic unencrypted.

Reputation services rate the domain extremely poorly, with Scamadviser assigning a trust score of 1 / 100 and Gridinsoft a score of 0 / 100. The domain is listed on one public blocklist, PhishDestroy, and Google Safe Browsing flags it for social engineering. VirusTotal scans returned 13 of 95 security vendors marking the domain as malicious, confirming a high likelihood of phishing activity. AlienVault OTX references the domain in a single threat‑intel pulse, further corroborating its malicious reputation.

The reported scam type is social‑media phishing, and the brand target is identified as Argent, indicating that attackers may be attempting to harvest credentials or personal data by masquerading as the legitimate brand. No additional content analysis or sample URLs are currently available, leaving the exact phishing landing page unknown. Defenders should add the IP address 188.114.96.3 and the domain fundershtex.com to blocklists, enforce DNS‑based filtering, and consider sinkholing the domain to prevent future resolution. Continuous monitoring of Cloudflare‑hosted infrastructure for new subdomains or re‑registration attempts is advised, as the low trust scores and multiple vendor detections suggest a persistent threat actor.